CVE-2026-87203 is a security vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.5 with high impact on confidentiality, integrity, and availability. The attack complexity is high, requiring no user interaction but low privileges and network access. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which contains 673 security patches across multiple products including Oracle Hyperion Financial Management.

Successful exploitation of this vulnerability can result in complete compromise of Oracle Hyperion Financial Management, affecting confidentiality, integrity, and availability of the system. The vulnerability requires network access via HTTP and low privileges, but exploitation is difficult due to high attack complexity.

Oracle has released a Critical Security Patch Update in September 2026 that addresses this vulnerability. Customers are strongly advised to apply the available security patches promptly to remediate this issue. Oracle recommends remaining on actively-supported versions and applying patches without delay. No additional mitigation steps are specified beyond applying the official patch.